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Abstract. We investigate bisimulation equivalence on Petri nets under 
durational semantics. Our motivation was to verify the conjecture that 
in durational setting, the bisimulation equivalence checking problem be- 
comes more tractable (which is the case, e.g., over communication- free 
nets). We disprove this conjecture in three of four proposed variants of 
durational semantics. The fourth case remains an interesting open prob- 
lem. 



1 Introduction 

Bisimulation equivalence [15, 14] is one of the most relevant semantical equiv- 
alences of concurrent systems. One of its advantages is that it often allows for 
an efficient verification algorithms in settings where other approaches (see, e.g., 
[7]), like language equality, lead to undecidable verification problems. There is 
now a wide range of results about decidability and complexity of different vari- 
ants of bisimulation equivalences in different classes of infinite-state systems (see 
e.g. [2]). 

Bisimulation equivalence relates processes exhibiting the same behaviour. 
In this paper we investigate performance equivalence, a variant of bisimulation 
equivalence that aims at relating not only purely functional behaviour, but also 
effectiveness of processes. A basic assumption is that each action of a process 
has assigned a positive duration, that is amount of time (or other resource) 
necessary to complete this action. Performance equivalence is then a variant of 
bisimulation that respects amount of time (resource) requested in both processes 
during execution. This notion was introduced in [8] and then studied among the 
others in [4,5, 1, 11, 12]. 

A starting point for our investigations was an observation made in [1] that 
the complexity of performance equivalence may be substantially lower than com- 
plexity of ordinary bisimulation equivalence. The authors of [1] investigated so 
called Basic Parallel Processes (BPP in short), a natural and simple fragment 
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of process algebra CCS [14] (it is expressibly equivalent to CCS without com- 
munication). BPP, when transformed to a normal form [3], is equivalent to a 
subclass of communication-free Petri nets. While bisimulation equivalence on 
BPP in normal form is PSPACE-complete [10,18], in [1] it was shown that 
performance equivalence may be decided in polynomial time. An intuitive justi- 
fication of this is that the latter equivalence, being more discriminating, satisfies 
stronger decomposition properties and hence is more tractable. Later on, it was 
shown that the polynomial time procedure exists for the whole BPP (not neces- 
sarily in the normal form studied in [1]) and that it coincides with distributed 
equivalence [12]. 

Performance equivalence is computationally more tractable than bisimulation 
equivalence on BPP, i.e., on communication- free Petri nets, hence a natural 
question arises: is it also more tractable in the case of general Petri nets? As 
bisimulation equivalence is undecidable in this case [9], the crucial question is 
whether performance equivalence is decidable or not. This is the main problem 
investigated in this paper. 

However, when one tries to define the durational semantics over Petri nets, 
necessary to host the notion of performance equivalence, it quickly turns out that 
there is no unique such semantics. We made a systematic research of possible 
ways to define it and come up with four different variants of durational seman- 
tics. The distinction depends on the choice between global-time or local-time 
approach, and on the way of synchronisation (patient and impatient approach). 

As a main result, we proved undecidability of performance equivalence under 
three of the four semantics. While the patient variants are easily undecidable, 
the proof for global-time impatient semantics is nontrivial and constitutes the 
main technical contribution of the paper. The proof builds on the method of 
Jancar [9]; however, substantial new insight was necessary to come over new 
difficulties and subtleties appearing in the durational setting. 

Under the impatient local-time semantics, the question is still open. If decid- 
able, performance equivalence would be one of very few notions of equivalence 
of general Petri nets exhibiting a decision procedure. This is actually the main 
motivation of this paper: 

Motivation: basing on the positive impact of durational semantics on 
complexity of equivalence-checking for BPP-nets, attempt to prove de- 
didability for general nets, thus discovering a decidable bisimulation-like 
equivalence of general nets. 

There is a wide range of research on timed extensions of Petri nets, like time 
nets or timed nets [13, 16]. In most of these extensions, some timing restrictions 
are posed on transition, places, or arcs. However, we would like to stress that our 
durational setting is different from the timed ones. The principal difference is 
that we do not aim at modelling timed behaviour; instead, our aim is to measure 
effectiveness of processes. In particular, we allow for a local-time semantics, 
where the time-stamps observed during an execution of a net need not be a 
monotonic sequence. 



Another distinguishing aspect is that the timed settings usually properly 
extend ordinary untimed nets, therefore decision problems become never easier, 
and typically harder. As a relevant example, the reachability problem, decidable 
for ordinary nets, becomes undecidable both for time nets and timed nets [6]. 

Our durational setting does not subsume ordinary nets. This gives hope for 
decidability of performance equivalence, and this stands behind the fact that 
the reachability problem is decidable in all four variants (in contrast to time 
nets and timed nets). This topic is discussed in detail in the last section. The 
durational setting does properly extend ordinary nets only when we allow for 
zero durations; see [11] for a decidability results about performance equivalence 
over BPP. 

In Section 2 we introduce the background material and formalise the dura- 
tional setting. We also mention quickly undecidability in both patient variants. 
Then Section 3 is devoted to the proof of undecidability under global-time im- 
patient variant. The last section contains a brief discussion on decidability of 
reachability problem for durational Petri nets and some final remarks. 

2 Preliminaries 

Bisimulation equivalence. A labelled transition system consists of a set of 
states S and a family of binary relations {^} a ec indexed by a labelling set C. 
We will write s\ s 2 instead of (si, s 2 ) 

A relation 1Z C S x S is a bisimulation if for each (si, s 2 ) G Tl the following 
two conditions hold: 

— if S\ ti for some a, t\ then there is some t 2 such that s 2 t 2 and 

(h,t 2 )eU; 

— if s 2 — * t 2 for some a, t 2 then there is some t\ such that s\ — > t\ and 

(h,t 2 ) en. 

States si,s 2 are bisimulation equivalent (bisimilar), if there is a bisimulation 1Z 
containing (si,s 2 ). 

It is instructive to recall an alternative definition of bisimilarity, in a setting 
of games. A Bisimulation Game is played between two players Spoiler and 
Duplicator. For convenience of presentation, we view Spoiler as "him" and 
Duplicator as "her". The positions in the game are pairs (s\,s 2 ) G S x S. 
In a position (si,s 2 ), Spoiler chooses i G {1,2} and a transition from Sj, say 
Si —+ U; Duplicator must respond by choosing some transition with the same 
label a from the other element of (s\,s 2 ), i.e., a transition s^-i — > t^-i - The 
play then continues from the position {t\,t 2 ). If one of the players gets stuck 
(there is no appropriate transition), the other player wins. If the play continues 
forever, Duplicator wins unconditionally. 

Generally speaking, a strategy for a player P in a game is a (partial) function 
which determines a concrete P-move for each sequence of so far played moves 
after which it is P's turn. A strategy is winning if player P wins each play 
when he/she uses the strategy. In what follows, by a strategy we always mean a 



memoryless strategy: each prescribed move depends on the current position only, 
not on the whole sequence of so-far played moves. By standard results, for each 
position (si, s 2 ), precisely one of the players has a memoryless winning strategy; 
moreover we have: 

Proposition 1 ([19]). Two states s x and s 2 are bisimilar iff Duplicator has 

a winning strategy in Bisimulation Game starting from position (s x , s 2 ). 

Hence Spoiler has a winning strategy iff Si and s 2 are not bisimilar. 

Labelled Petri nets. A finite multiset over a set A is formally a mapping 
M from A to N, the set of natural numbers, such that M(a) > for only a 
finite number of elements a. E.g., the empty multiset maps all a G A to 0. 
We apply the usual arithmetical operations to multisets in a point-wise manner. 
E.g., point-wise addition is the union operation of multisets; and M < M 1 means 
that M(a) < Ad' (a) for each a 6 A. We will often write finite multisets by 
enumerating its elements, e.g., aab will denote the function mapping a to 2, b to 
1, and all other elements of A to 0. 

A labelled Petri net (net in short) N is given by a finite set of places V, a 
finite set C of labels, and a finite set of transition rules of the form X A Y, 
where X and Y are finite nonempty multisets over V and a 6 C. In the sequel 
it will be sufficient to consider only those nets, where X and Y are always sets 
(i.e., multisets mapping each element to or 1). This restriction corresponds to 
the class of pure Place/Transition labelled Petri nets. 

A net naturally induces a labelled transition system. Its states are all fi- 
nite multisets over V (traditionally called markings). There is a transition from 
marking M to M', labelled by a, if there is a transition rule X ■£> Y such that 
M > X (point-wise) and M' = M — X + Y . In traditional terminology, one 
says that the transition rule X A Y is fired at marking M; the transition rule 
is fireable in M if M > X. Note that we do not fix an initial marking of a net. 

There is a natural operational interpretation of the induced transition system. 
A marking may be understood as an assignment of a number of tokens to each 
place. And each transition rule specifies the necessary condition on the number 
of tokens on some places. For instance, a rule ppq -2> ps would mean that an 
a-transition is allowed assumed at least two tokens on place p and at least one 
on place q; as an outcome of the transition, the three tokens are removed, then 
one token is placed back on p and one on s. 

The bisimulation equivalence problem for labelled Petri nets is defined as fol- 
lows: given a net N and two markings Mi, M 2 , decide whether they are bisimilar 
as the states in the labelled transition system induced by N. Undecidability of 
this problem was proved by Jancar in [9]. Note that equivalently we could for- 
mulate the problem for the (initial) markings in two distinct nets. 

Bisimulation equivalence relates two states (or two systems, in general) with 
the same functional behaviour. We will now extend this setting to allow to 
compare, in addition to pure functional behaviour, also its effectiveness (perfor- 
mance). The idea comes from [8] and amounts to (i) assigning a duration to each 
transition; (2) respecting the durations in the bisimulation equivalence. 



Durational labelled Petri nets. Following [8], we choose a discrete time 
domain, represented by natural numbers. From now on we will assume that 
each transition rule r of any labelled Petri net TV has assigned a positive natural 
number, its duration, written dur(r). Such nets, enriched by a duration function, 
are called durational nets in the sequel. Note that we do not allow for dur(r) = 0, 
as in [8] and in the following papers [4,5, 1]. If we allowed for zero durationsm 
our model would trivially subsume ordinary Petri nets. 

A durational marking is a finite multiset over PxN; intuitively, each token 
in a marking has now a time-stamp. In an initial marking, the time-stamps of 
all the tokens will be usually 0. We will write t > p instead of (p, t). A dura- 
tional marking M may be naturally mapped to an ordinary (non-durational) 
marking untime(M) by removing all the time-stamps (untiming) but preserv- 
ing the number of tokens at each place. E.g., the durational marking M = 
(0>p)(3 >p)(3 >p)(2 > q) would be mapped to untime(M) = pppq. 

For notational convenience we will extend the i>_ notation to non-durational 
markings: by t > M we will mean the multiset {t> p : p E M}. E.g., (0 >p)(3 > 
p) (3 > p) (2 >q) may be equivalently written as (0 > p) (3 > pp) (2>q). 

We will define the durational semantics for Petri nets by specifying (i) when 
a transition rule is fireable in a durational marking M, and (ii) what is the 
effect of its firing. The labels in the induced transition system will be now pairs 

(a, t) G C x N. The intuitive meaning of a transition M M' is that t units of 
time had to elapse before this transition became fireable. The amount of time t is 
always measured relative to the starting moment of an execution; in particular, 
the very first transition will be usually fired at t = 0. 

Before making our durational semantics explicit, we need to introduce some 
notation. For a durational marking M, by stamps(M) denote the set (not mul- 
tiset) of all time-stamps of tokens in M, and by max-stamp(M) the greatest 
time-stamp in M. Formally: 

,„,s fmax(stamps(M)) if M ^ ( 
stamps(M) = {t : top G M} max-stamp(M) = < 

I otherwif 

We distinguish four different durational semantics, depending on whether it is 
patient or impatient, and whether it is global-time or local-time. In each of the 
four variants, we will make it precise when a transition rule X Y is fireable 
in a durational marking M , at time t due to a submarking X. In each of the 
four variants, it requires that X < M (X is a durational submarking of M) and 
X = untime(A) (the rule actually applies to X). In addition, the following is 
required, depending on the variant of semantics: 

— local-time, patient semantics: max-stamp(X) = t. 

— local-time, impatient semantics: stamps(A > ) = {t}. 

Intuitively, in the patient semantics, a token with an "earlier" (smaller) time- 
stamp may "wait" for other tokens with "later" time-stamps; but this is not 
allowed in the impatient variant, where the tokens must agree on their time- 
stamps to be able to fire synchronously a transition rule. 



Note that we did not assume that a transition with the smallest possible 
time-stamp is chosen to be fired. In the globaltime patient (impatient) seman- 
tics we additionally require this: a transition rule X -2» Y is fireable in M, at 
time t due to X, if it is fireable according to the local-time patient (impatient) 
semantics, and t is the smallest among all possible choices of a rule X -2» Y and 
a submarking X. 

Uniformly for all four variants, whenever a transition rule r = (X ~-> Y) is 
fireable in M, at time t due to X, then in the induced labelled transition system 
there is a transition M — + M', where M' = M — X + {(t + dur(r)) >p : p E Y}. 
I.e., fresh tokens are produced as specified by Y , and their time-stamps are equal 

to t + dur(r). We call t a time label of transition M — * M' . 

When convenient, we will identify a Petri net with its induced transition 
system, e.g., we will speak of 'transitions' of a net. By an execution of a net we 
mean a finite or infinite sequence of transitions: 

► Mi > Mi ► . . . 

Note that the initial marking M is not fixed for the net. For two durational 
markings M, M', we say that M' is reachable from M if there is a finite execution 
that starts in M and ends in M'. 

We say that two durational markings M, M' of a given durational net N 
are performance equivalent if they are bisimulation equivalent in the induced 
labelled transition system. The topic of this paper is undecidability of the fol- 
lowing problem: given TV, M and M', decide whether M and M' are performance 
equivalent. 

It is an easy observation that patient semantics can faithfully simulate ordi- 
nary semantics, and therefore we have: 

Proposition 2. The problem of performance equivalence is undecidable for Petri 
nets under (global-time or local-time) patient semantics. 

The easy proof is by reduction from bisimulation equivalence of ordinary 
Petri nets. Given such a net N, we extend it by one special place p and add this 
place both to pre-places and post-places of any transition. In the initial marking, 
p is marked with a single token. Therefore during a run, place p will always 
have precisely one token, with the "latest" time-stamp; and this time-stamp will 
be always observable at the next transition. Hence, performance equivalence 
between so extended nets coincides with bisimulation equivalence of the original 
ordinary nets. 

The case of impatient semantics is more difficult. We were able to show un- 
decidability only in the global-time variant. Decidability of performance equiv- 
alence in the last, local-time impatient variant, remains still open. 

3 Undecidability under global-time impatient semantics 

Theorem 1. The problem of performance equivalence is undecidable for Petri 
nets under global-time impatient semantics. 



The proof is by reduction from the (undecidable) halting problem of Minsky 
machines, and occupies the rest of this section. It is motivated by the Jancar's 
proof for ordinary Petri nets [9]; however, a new insight was necessary to adapt 
this proof to the durational setting. 

A Minsky deterministic 2-counter machine M consists of two counters c , Ci 
and a set of n labelled instructions 

1 : instri 
n : instr n 

each instruction in one of the following forms: 

i : c b := c b + 1; goto j (increment) 

i : if c b = then goto k (zero-test or decrement) 

else c b := c b — 1; goto j 

n : halt (halting instruction) 

Variables i, j and k range over {1 . . . n} and b over {0, 1}. We say that M halts if 
starting from instri and c = Ci = 0, the unique run of M ends in instruction 
n : halt. 

Given a Minsky machine M, we will construct a Petri net Nm and two mark- 
ings in such a way that the markings are performance equivalent iff M does not 
halt. 

There will be places in Nm corresponding to particular instructions of M and 
to particular counters. Formally, the set of places will be V — {pi, qi 1 p' il ^}i=i...nU 
{&', 6", Z' b , ^'}&=o.i and the labelling set C ~ {i, d, z, z, To, ri, to}. Transition rules 
of Nm are defined as follows. For every increment instruction we define the tran- 
sition rules: 

(I) Pl i* Pj b'b" q t -U qj b'b" 

where b € {0,1}. For every 'zero-test or decrement' instruction we define the 
following transition rules: 
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And for the halting instruction we define: 

(0) Pn ^ 



Finally, we define additional transition rules: 



(Tt) b'b" ^ b'b" 
(T„) b'Z' b ' 3 b'b" 
(Tin) b'Z' b ^ 

and set the duration of every transition rule to 1. Note that each of the rules, 
except (0), appears actually in two instances, for b equal to or 1. We hope that 
it will be always clear from the context which of the two instances is considered. 

As in the proof of Jancar [9] , we will show that machine M halts if and only 
if two (singleton) durational markings > pi and > q\ are not performance 
equivalent. By inspecting the rules one observes an invariant: every marking 
reachable from any of the two markings contains exactly one token on places 
in {Pi,Pi,qi,q'i}i=i... n - In the following, a marking of one of the forms (after 
untiming) : 



Pi {0'0") x (l'l") y , p;(0 / 0") x (l'l") w > q i {0'0") x ( 1 ' 1 ") V or q'i(0'0") x {l'l") y 

will be used to represent the machine M being in a state that enables to execute 
instruction instri, with the counter values Co = x and ci = y. Note that not 
all reachable markings are of this forms, but every marking has a maximal sub- 
marking of this form, and it is this sub-marking that we use to determine the 
state of machine M. 

According to the global-time semantics, a transition rule may be fired with 
time label t E N only when no transition rule is fireable with time label smaller 
than t. Consider now any execution (a sequence of transitions) of Nm starting 
from > pi or > qi , and the first transition M — * M' with time label t during 
this execution. All the tokens in M with time-stamp smaller than t are therefore 
not able to engage in a transition from M. We say these tokens are dead in M; 
formally, a token is dead in a marking M if some transition is fireable in M with 
time label bigger than the time-stamp of this token. Note that a token which 
is dead in some M, remains dead in each marking reachable from M, since the 
semantics is impatient. 

We make the following observation: 

Claim. For every t <E N, every execution of Am from > p\ or > qi contains a 
marking such that the time-stamps of all non-dead tokens are equal to t (such a 
marking is called t-equimarking). 

Indeed, if a transition with time label t appears in the execution, then the source 
marking M of the first such transition satisfies the condition (M contains no 
tokens with time-stamp larger than t as the duration of each transition rule is 
1). Or no transition with time label t appears at all, which implies that the 
execution is finite and ends in a deadlock marking, in which all tokens are dead 
and have time-stamps less or equal t. It clearly satisfies the condition of the 
claim. 

All transitions executed between two consecutive equimarkings (t- and (t+1)- 
equimarking, for some t) we call a large step. 



Now we are prepared for the reduction. As the first case, assume that machine 
M halts; we will show a winning strategy for Spoiler. This strategy corresponds 
to the actual execution of M, hence we call it a correct simulation. An execution 
of each instruction of the machine is represented (simulated) by one or two large 
steps. 

A position (M, M') in a play is conforming if M and M' are identical, except 
that one of them may have a token t>Pi and the other t> qi, or one of M, M' 
may have t > p\ while the other t > q\. The starting position (0 > pi,0 > qi) is 
conforming. Consider a conforming pair of i-equimarkings: 

t> Pl (o'o") x (i'i")y I t>q t (o'o") x (i'i") y 

We write (0'0") x for x copies of O'O". As mentioned above, when we write 
tt>Pi(0'0") x (l'l") y we mean that time-stamps of all tokens are t. In the sequel, to 
succinctly write markings containing tokens with different time-stamps, we will 
use a union operation on multisets, denoted by ||. We will show how Spoiler can 
enforce a conforming pair of (t+l)-cquimar kings during the play, at the same 
time simulating the execution of M. Assume, without loss of generality, that 
instri acts on counter c . We consider all possible types of instruction instr^ 
In each case, Spoiler plays on the left-hand side and Duplicator is constantly 
forced to copy Spoiler's moves on the other side. 

(increment) Spoiler executes transition (I), to which Duplicator must re- 
spond with (I). Next, Spoiler fires x+y times transition rule (Tj) (first all To, 
then all ti); for future reference, we call such a sequence of (li) transitions a 
default step completion. During the completion, the responses of Duplicator are 
uniquely determined, as transitions rules (T n ) and (T m ) are not fireable. 



t> Pl (o'o") x (i'i")y 


t> qi (0'0") x (l'l") y 


l m 


i m 


{t+i)> Pj (o'o") || tt>(o'o") x (i'i")y 


(t+i)>^(o'o") || t>(o / o") x (i'i")y 


|(Ti)* 


| <Ti)!c 


{t+l)>p j (0'0") x+1 || t>(l'l") B 


(t+l)>q 3 (0'0") x+1 || t>(l'l") y 


|(Tl)f 


|(Tl)f 


{t+i)>p 3 {o'o") x+1 {i'i")y 


(t+i)>q 1 (o'o") x+1 (i / i")y 



For convenience, we decorate each transition by the identifier of the relevant 
transition rule, in place of its label. 

Both the resulting markings are (i+l)-equimar kings which completes the 
simulation of instruction instri. They represent the machine M in a state that 
enables to execute instruction instrj, and the counters values are as expected. 

(zero-test or decrement) In this case, the behaviour of Spoiler depends on 
the value of counter c , i.e. the value of x. 



If x = 0, Spoiler executes transition (Z), to which Duplicator must respond 
with (Z). Then Spoiler completes the step in the default manner. 



|(z) 

\\t»(i'i")y 

J_(T X )» 

(t+i)>p / j (W)(i'i") B 



tt> qi {Vi")y 

(t+l)>g((«) ||i>(l'l'')» 

|(Ti)f 

(t+l)>gj(«)(l'l»)» 



Then Spoiler starts the next large step with transition (Zi). As there are 
no 0" tokens in the marking, transitions (Z n ) and (Z m ) are not fireable and 
Duplicator must respond with (Zi). Next, Spoiler completes the step in the 
default manner, reaching (i+2)-equimarkings, thus finalising the simulation of 
instruction instri as expected. 



(t+i)>p' i (z^)(i'i")y 

(t+2)» Pk || > (l'l")" 

j(Tl)« 

(t+2)> Pk (i'i")y 



(t+i)> q ' l (z^)(vrr 

|(Zl) 

(t+2)>q k || (t+1) > 
(i+2)>9 fe (l'l") !/ 



In the other case, when x > 0, Spoiler start with transition (D) and com- 
pletes the step in the default manner. 



t> Pi (o'o") x (i'i")y 

|(D) 

(t+i)>Pj || t>(o'o") x - 1 (i'i")y 

|( Tl) x + B -l 

(f+l)>p J (0'0") a; - 1 (l , l") ! ' 



t> qi (o'o") x (i'i")y 

(t+l)>q 3 || t>(0'0") a; - 1 (l'l") ? ' 

| (Tl) x + »-l 

(t+i)> 9j (o'o") x - 1 (i'i") !/ 



In both cases the final position is a conforming pair of equimarkings. 



(halting instruction) Player Spoiler executes transition (0); Duplicator has 

no response and losses the game. 



As the second case, assume that machine M does not halt; we will show a 
wining strategy for Duplicator. As long as Spoiler plays a correct simulation, 
Duplicator's behaviour is determined. However, a position enabling firing of 
transition rule (0) is never reached, and the game never ends - Duplicator 
wins. 

Spoiler can diverge from the correct simulation (cheat) in two ways: in- 
significant or significant. The former means that the equimarkings arc the same 
as in the correct simulation. This kind of cheating involves shuffling the order 
of transitions within one large step and changing the side on which Spoiler is 



playing. With such behaviour, he still essentially simulates the execution of M: 
he will never fire transition rule (D), thus Duplicator wins. 

Spoiler can also cheat in a significant manner, simulating a positive zero 
test, when it should decrease the counter. However, Duplicator can respond 
to such behaviour in a way which will make the next equimarkings identical, 
modulo dead tokens. Afterwards, Duplicator can copy Spoiler's behaviour 
exactly, and hence win the game. 

In what follows, we give an exhaustive overview of possible Spoiler's cheat- 
ing behaviour, and show how Duplicator can respond to them to ensure her 
win. As before, we start with a conforming equimarking position and we assume 
that instruction instri uses counter c . 

t> Pi (o'o") x (i'i")y | t> qi (o'o") x (i'i") y 

We consider below all possible types of instruction instri. In each case we 
assume that the first move of Spoiler is on the left-hand side. 

(increment) Spoiler can, in any order, execute transitions (I) and (T x ), which 
Duplicator must (and can) copy. The equimarkings reached in the end cannot 
be different then those appearing in the correct simulation. It is hence an in- 
significant cheating. 

(zero-test or decrement) If counter Co used by the instruction is equal to 0, 
Spoiler can only cheat insignificantly. During the first large step involved in the 
simulation, Spoiler can choose an arbitrary ordering of (Z) and (Tj) transitions, 
as it does not influence the resulting equimarkings: 

(t+i)>p , i («)(i , i»)» | (m) 

In the second large step, Spoiler's choice is again limited to shuffling of (Zi) 
and (Ti) transitions, as none of the (Z n ), (Z m ), (T n ) or (T m ) transition rules 
is fireable. It has no influence on the resulting equimarkings, which completes 
the simulation of instri: 

(t+2)>p fe (l'I") y | (t+2)»q k (Vl")y 

Now assume that c is non-zero, x > 0. Spoiler can cheat insignificantly, if he 
decides to decrease the counter. As before, he will be limited to shuffling around 
the (D) and (Tj) transitions, with no influence on the resulting equimarkings: 

{t+i)> Pj (o'o") x - 1 (i'i")y | (t+i)>q 1 {o'o") x - 1 {i'i")y 

In all the cases above, Duplicator was forced to copy the moves of Spoiler. 
A more interesting case is when Spoiler decides to cheat significantly, and 
executes transition (Z) despite that x > 0. Duplicator is forced to respond with 
(Z). Then, after completion of the step, irrespectively of the shuffling of the (Ti) 



and (Z) transitions (no other transition rules are fireable) , the equimarkings will 
have the from: 

(t+i) > P ' i (z^ ){Q'Q"y{vvy | (t+i) > ^(«)(o'o"r(i'i'T 



Note that the only fireable Ti-labeled transition rule is (Ti), activated by tokens 
(t+1) > V and (t+1) > 1" (as there are no Z( or Z" tokens). It does not matter 
for the next (t + 2)-equimarkings how firings of (Ti) are interleaved with the 
other transitions. Hence, we omit it in the presentation below and proceed as if 
we were in the position^: 



(t+i) (co") a 



(t+i)> q i(zm(o'o"y 



In all of the cases below (except for one, which is explained separately), 
Duplicator will respond in such a way that the resulting equimarkings are 
identical. From that point on she may copy exactly the Spoiler's moves and 
hence win the game. 

1. If Spoiler executes (Zi), Duplicator responds with (Z m ). The step can be 
completed only by x executions of the (Ti) transition on the left and x—1 
executions of (Ti) and one execution of (T m ) on the right. These transitions 
have identical labels, hence it is irrelevant in what order they are executed 
and on which side Spoiler is playing. 



(m)^(«)(o'o'T 

j(Zl) 

(t+2)> Pk || (t+1) > (0'0") x 
I (TI)X 
t + 2> Pk (0'0") x 



(t+i)^(«)(o'o'T 

j(Zin) 

(t+2)> Pk || (i+l)>(0 / ^)(0 / 0") x_1 
t + 2> Pk {0'0") x 



2. If Spoiler executes transition (Z n ), Duplicator responds with (Z m ). Com- 
pleting the step involves x—1 firings of (Ti) and one firing of (Tu) on the left, 
and x—1 firings of (Ti) and one firing of (Tm) on the right. As above, the 
Spoiler's choices at this stage have no influence on the resulting equimark- 
ings. 



(m)M(«)(o'o'T 

j(Zn) 

(t+2)> Pk || (t+i) > (o'^'Ho'oT -1 

ItTiJ^tTuXTj)^-"-! 

(t+2)> Pk (0'0") x 



(t+l)>q' i (Z' Q Z^)(0'0") x 

|(Zm) 

(t+2)> Pk || (t+i)»(o , z[ ) )(o'o"y- 1 

(t+2)> Pk (0'0") x 



3. If Spoiler executes transition (Z m ), Duplicator responds with (Zn). This 
case is similar to the one above. 

4. If Spoiler executes transition (Ti), Duplicator responds depending on the 
value of x. If x > 1, she executes (Ti). Notice that the tokens (t+2) > (O'O") 



have no influence on the (t+l)-time-stamped tokens. Hence Duplicator can 
continue as if the configuration was but with one less 0' and 0" tokens. 



(t+i)>p>(z' z'>wo"r 

|(Tl) 

(t+l)>p<(^^)(0'0") a! - 1 
(t+2) > (CO") 



(t+i)»«<(»)(o'o") x 

|< t i> 

(t+i)> 9 |(z^;)(o'o"r 1 

(t+2) > (0'0") 



If x = 1, Duplicator executes (l m ). Completing the step involves firing of 
(Zi) on the left and (Z m ) on the right. 



(i+l)»p' i («)(0'0") 

J, Pi) 

(t+l)>p5(W) || (i+2)»(0'0") 
(M-2)>Pk(0'0") 



(t+l)>g<(«)(0'0") 

I (Tin) 

(t+l)»g<(0"Z£) || (t+2) > (CO") 

jPm) 

(t+2)>p fc (0'0") 



5. If Spoiler executes (T n ), Duplicator responds with (T m ). 



(t+i)>p' i (zm(o'o"r 

J, (Til) 

(t+l)>p' l (0"Z^)(0'0"r- 1 || (t+2)>(0'0") 



(t+i)>^(4^o)(o'oT 

I (Tm) 

(t+i)>^(o"^')(o , o") a; - 1 II 

(t+2) > (0'0") 



Now the play can continue in one of two ways, depending on the behaviour of 
Spoiler. Before it is decided, as long as Spoiler executes (Ti), Duplicator 
responds with (Tj.): 



(t+l)>p' l (0"Z^){0'0") x - 1 || (t+2)>(0'0") 



(t+l)>^(0"^o)(0'0'T~ 1 
(t+2) o (O'O") 



|(Tl)" 

(t+l)>p' i (0"Z( ) ){0'0") x - u - 1 
(t+2) > (0'0'T +1 



|(Tl)" 

(t+l)>^(0"^o)(0'0") 3: " u " 1 
(t+2) > (0'0")" +1 



At some point Spoiler must decide between executing, on the left-hand 
side, of (Z n ) (equivalently, (Z ra ) on the right) or (T m ) (cquivalently, (Tn) 
on the right). In the first case, Duplicator responds as follows: 



(t+l)>p / i (0"^)(0 / 0") x - u - 1 II 
(t+2) > (0'0")" +1 

j(Zn) 

(t+2)> Pk (o'o") u+1 || (t+ixo'o")*- 1 '- 1 

| (Tl )*-«-i 

(M-2)>p fc (0'0") x 



(t+l)>q' l {0"Z^(0'0"r- u - 1 || 
(t+2) > (0'0")" +1 

jPlIl) 

(t+2)>p fc (0'0")" +1 || (t+lMO'O")*-"" 1 

| (Tl) x-u-l 

(t+2)>p fe (0'0") x 



whereas in the latter case: 



(t+l)>p / j (0"^)(0 / 0") x_, '~ 1 
(t+2) > (0'0")" +1 

I (Tin) 

(m)t>Ko"o"(o'o'T~"~ 2 

(t+2) > (0'0") u+2 

| (Tl) x- U -2 

(t+1) >j/ j 0"0" || (t+2) > (0'0") x 



(t+l)>g<(0"Z^)(0 / 0") x ~"~ 1 
(t+2) > (0'0")" +1 

(t+1) o^0"0"(0'0") x ~ u ~ 2 
(t+2) > (0'0")" +2 

| (Tl )s-«-2 

(t+i) ><z,;o"o" || (t+2) > (o'o") x 



This is the only case so far in which the resulting markings are not identical. 
However, the (t+l)-time-stamped tokens on both sides are dead, whereas the 
(t+2)-time-stamped ones are identical. Hence, Duplicator can still copy in 
future all the transitions that Spoiler makes, even if it the configurations 
do not represent a proper machine state anymore. 
6. If Spoiler executes (T m ), Duplicator responds with (T n ). What follows 
is similar to the previous point. 

(halting instruction) Simulation of instruction n : halt may happen only if 
Spoiler have cheated earlier in a significant manner. As we have shown above, 
in such a case the markings on both sides are identical and Duplicator still 
wins. 



We have shown that the initial markings > pi and > qi are performance 
equivalent if and only if machine M does not halt. Hence performance equivalence 
is undecidable. 



4 Concluding remarks 

We have investigated Petri nets under four different durational semantics, and 
the corresponding variant of bisimulation equivalence, called performance equiv- 
alence. We have proved that in three of the four cases, performance equivalence is 
undecidable. Hence, unfortunately, our results do not confirm a conjecture that 
performance equivalence might be easier to decide than classical bisimulation 
equivalence. However in the fourth variant, i.e., local-time impatient semantics, 
we were able neither to confirm nor to falsify the conjecture. There is hence still 
a hope that this last variant might admit an effective decision procedure and we 
conjecture that this is really a case. 

As an encouraging observation we mention a partial decomposition property 
which holds in case of local-time impatient semantics. Consider a pair of per- 
formance equivalent markings, f > M and t > M', and some transition of one 
of them t> M — ^ t > M\ || (t+1) > M 2 , assuming dur(a) = 1, which may be 

answered by some t > M — -» t > M[ \\ (t+1) > M' 2 . An easy observation is that 
(t+l)t>M 2 and (t+l)>M 2 must be necessarily equivalent, as Spoiler may decide 



to use only time labels greater than t from this point on. More generally, if M 
and M' are equivalent, than for any t, their submarkings containing tokens with 
time-stamps greater than t are equivalent too. 

Another optimistic fact is that reachability seems to be decidable in all four 
variants of durational semantics. We explain this in a bit more detail now. 

One possibility of defining the reachability problem is as follows: given a net 
N and two durational markings M , M, we ask whether M is reachable from 
M in N. This problem is easily decidable, as it is sufficient to search, roughly 
speaking, through a finite part of the induced labelled transition system contain- 
ing transitions with time label smaller than max-stamp(M) (the other transitions 
must not be used if we aim at reaching M) . It seems that our comparison with 
non-durational nets is not fair if we stick to this formulation of the problem. 

A more interesting variant of reachability is when the destination marking M 
is non-durational. We ask now whether some marking M is reachable in N from 
Mo, such that untime(M) = M. Hence, we specify only number of tokens on 
each place in the destination marking, and leave their time-stamps unspecified. 
It seems that in all the four semantic settings, this last variant of reachability is 
decidable. The easiest is local-time patient semantics, which does not differ sig- 
nificantly from non-durational semantics in the context of reachability question. 
All the other three variants are different from non-durational setting in that in 
a given reachable marking, some of the transitions may be non-fireable in the 
former while fireable in the latter. That is to say, our durational settings pose 
some additional restriction of fireability of particular transitions. Despite this 
difference, it seems that reachability may be solved by viewing durational Petri 
nets as nets with hierarchical inhibitor arcs [17]. In this model one allows for 
emptiness tests on some places, but it is assumed that all those tests (inhibitor 
arcs) are ordered and that they are only executed in a hierarchical manner with 
respect to this order. It seems that a decidability result of [17] may be used, due 
to a reduction from durational nets to nets with hierarchical inhibitor arcs. In 
addition to the performance equivalence problem which we leave open, a detailed 
investigation of the reachability problem is clearly an interesting continuation of 
the presented work. 
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